CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a...9.8 Critical
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive...5.9 Medium
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11...5.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreImproper neutralization of null byte leads to read overrun6.5 Medium
- salesforce tableau server, tableau server +1 moreTableau Server installations configured with Site-Specific SAML that allows the APIs to be used...9.8 Critical
- canonical pulseaudio, ubuntu linux +1 moreBypass of snapd pulseaudio restrictions4.4 Medium
- broadcom unified infrastructure managementCA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot ...7.8 High
- jsen project jsenArbitrary Code Execution7.2 High
- otrsBypassing user account validation4.1 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCrash while joining collections with $lookup6.5 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreCrash while handling internal Javascript exception types6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant in IndexBoundsBuilder6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more$mod can result in undefined behavior6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant with $elemMatch6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 morePost-auth queries on compound index may crash mongod6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant failure in applyOps6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific query can cause a DoS against MongoDB Server6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service when processing malformed Role names7.5 High
- securityonionsolutions security onionSecurity Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/<user>/…7.8 High
- hashicorp consulPrivilege Escalation in HashiCorp Consul6.5 Medium
dashSUSESecurity update for dashNo scoreunicornOSS-FuzzUNKNOWN READ in helper_be_stl_mmu_armebNo scorearrowOSS-FuzzHeap-buffer-overflow in arrow::internal::ValidateUTF8No scoreopenscOSS-FuzzStack-buffer-overflow in insert_keyNo score- apple ipados, macos, safari +5 more +7 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +3 more +5 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3...6.1 Medium
- apple icloud, icloud for windows, ipados +8 more +10 moreAn input validation issue was addressed with improved input validation. This issue is fixed in...6.1 Medium
- apple ipados, macos, tvos +3 more +5 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple icloud, icloud for windows, ipados +7 more +9 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- cimg, fedoraproject fedora +1 moreA flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer...8.1 High
- webkit, webkitgtk, fedoraproject fedora +2 moreAn exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A...8.8 High
- webkit, webkitgtk +1 moreA code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0....8.8 High
- hcl dominoHCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of...7.5 High
- hcl notesHCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of...7.5 High
- hcl dominoHCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user...7.5 High
- paradox ip150 firmwareThe affected product is vulnerable to three stack-based buffer overflows, which may allow an...9.8 Critical
- debian linux, fedoraproject fedora, librdf raptor rdf syntax library +2 moreA malformed input file can lead to a segfault due to an out of bounds array access in...6.5 Medium
- paradox ip150 firmwareThe affected product is vulnerable to five post-authentication buffer overflows, which may allow...8.8 High
- tp-link archer c9 firmwareUNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an...6.1 Medium
- glyph & cog xpdf, fedoraproject fedora +1 moreIn Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to...5.0 Medium
wolfsslOSS-FuzzStack-buffer-overflow in fp_read_unsigned_binNo scoremediawikiDebianmediawiki - regression updateNo score- scikit-learnscikit-learn Denial of Service7.5 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650...8.2 High
- vmware esxi, cloud foundation +1 moreVMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650...7.8 High
- netskopeA CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated...7.8 High
- pdfresurrect project pdfresurrect, debian linux, fedoraproject fedora +2 morePDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in...7.8 High
- libvips, debian linux, fedoraproject fedora +2 moreim_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an...5.3 Medium
- scratchverifierVerification Code Hijacking in ScratchVerifier7.5 High
- Show moreLoading…